Privacy

What the website receives

• The character export you paste: name, class, race, level, gear, talents, professions and bag items. It is used to compute your answer and is never written to disk. The answer is held in the server's memory for a short while so repeat visits are fast, and is gone when the server restarts.

What the companion app shares, and only when a server is set

• Stats of items your game client showed (the numbers from the game's own item API).
• The effect lines on those items ("Equip:", "Use:", "Chance on hit:", set bonuses).
• Item numbers your client could not load (usually items not released yet).
• Measurements from your combat log: creature health, armor and level; how long fights took and how much damage, healing and mana they used; time between pulls; mana regeneration; where creatures were (map coordinates).
• Other players are never identified: uploads carry only their class and level with the fight numbers. No names, realms, guilds, chat or player ids. (The app keeps a one-way hash of their game id on your computer only, to tell one player's fights from another's.)
• Where items came from, as your game showed them: which creature or object dropped an item and how many times you looted that creature, quest rewards (quest id, title, zone), and vendor stock and prices, with the zone and map position where you saw them. Creature, quest and vendor names reach other players only when several installs report the same one. Never who looted, or anything about other players.
• Base stats by race, class and level (for example "Orc Warrior, level 12: 23 Strength, ..."), read from your character sheet without gear or buffs, so the addon's general upgrade lists cover every class. Nothing about which character it was.
• A random install id created on your computer, so your later uploads replace your earlier combat data instead of counting twice. It is not linked to your account or character.

Community uploads never include your character's name or realm. Start the companion with --no-share to share nothing; it still downloads the community data.

Your character link (the companion's sync)

• The companion uploads your own characters' addon snapshots (name, realm, class, level, gear, bags, talents, professions) to a private slot on the site, so the website shows your current character without an export.
• The slot is keyed by a random secret made on your computer. Only its SHA-256 hash is stored on the server, and the key travels in a request header and the URL fragment, never in a URL the server logs. Anyone with your link can see your characters, so keep it private.
• This is separate from community sharing: synced characters are never merged into community data.
• Start the companion with --no-sync to turn it off. "Forget this browser" on the site deletes your characters from the server and removes the link from that browser. If the companion keeps running with the same link it uploads them again, so stop it or use --no-sync first.

The desktop app (Lootsage.exe)

• It is the companion packaged as one file. It keeps its data in %LOCALAPPDATA%\Lootsage on your computer (learned stats, your link key, settings); delete that folder to start over.
• It downloads the game tables it needs from this site (the same public tables the site uses) and checks each file's fingerprint. Downloads send nothing about you.
• It installs or updates the Lootsage addon in your game's AddOns folder, and changes nothing else in the game folder except the addon's Pack.lua.

What the addon does

The addon never sends anything anywhere (WoW addons cannot). It saves to your SavedVariables file, which the companion reads on your computer.

Processors

• Fly.io hosts the website and stores community uploads.
• Portrait and class icons are fetched by our server from Wowhead's icon server and served from lootsage.com, so your browser does not contact Wowhead to show them. Item links go to Wowhead only when you click them.
• Anthropic (Claude) is used internally to read Blizzard's public patch notes and item effect text into changes for us to review, and to help build the site. Player uploads, characters and links are not sent to it.

Review

Uploaded data reaches other players only after several installs agree and a person reviews and publishes it.